Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/4837b021-f493-3c03-a601-3734117996f9.roa
File:                     4837b021-f493-3c03-a601-3734117996f9.roa (raw, json)
Hash identifier:          kZD7G84H5sU1gt1RmjHpCaNBTSdutSHRTb1PhGdh/rQ=
Subject key identifier:   D6:63:9D:FE:00:5A:0C:83:18:BE:0C:00:3C:D7:80:3F:75:98:2D:A9
Certificate issuer:       /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
Certificate serial:       010D0C9F4328584EA7870D9FB5D60049FBBEAC80
Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/4837b021-f493-3c03-a601-3734117996f9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30029
IP address blocks:        150.253.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:0d:9f:b5:d6:00:49:fb:be:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4d382bce-b473-4e07-b921-0f77ad4373e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:46:45:98:de:3c:ff:a4:d9:c4:c7:9f:9d:bb:
                    0f:92:63:73:26:91:e4:3e:e2:93:94:42:d3:9c:f9:
                    34:40:23:85:33:ed:1e:d6:3e:f5:0e:14:c2:09:43:
                    82:43:48:5e:e6:5a:d7:af:51:50:ff:72:af:16:7b:
                    a6:62:ed:ed:b5:a9:16:02:fc:e4:c7:e9:a0:73:45:
                    a0:05:94:f6:cd:4c:e6:20:3b:9e:a3:9c:ec:08:fa:
                    1d:f0:a7:99:3a:6f:15:e9:e3:12:be:ef:4c:18:92:
                    7f:d9:14:88:bb:e1:93:3c:68:c2:b8:6c:be:61:3c:
                    66:c2:c2:19:af:f9:df:64:ed:5b:03:8d:be:5b:17:
                    a2:b9:76:de:9b:49:f4:b3:f1:f8:bf:21:eb:9f:80:
                    d2:4d:99:85:0c:94:fe:19:6a:ea:2b:70:42:5f:cc:
                    c5:d9:04:c4:6c:b7:d8:46:e2:9b:85:bb:68:7a:35:
                    b4:31:55:c3:60:96:5c:5a:ea:4b:38:64:48:03:ef:
                    a1:6e:4a:f0:a5:4d:91:e3:a5:a5:77:86:e5:09:e6:
                    ca:a9:a2:9c:10:45:72:57:af:8c:ea:94:94:99:57:
                    65:78:82:6f:e4:50:bf:bf:b6:ac:b5:83:53:77:1e:
                    8e:02:18:51:b0:00:94:15:db:ed:9e:66:b7:64:13:
                    c8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:63:9D:FE:00:5A:0C:83:18:BE:0C:00:3C:D7:80:3F:75:98:2D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/4837b021-f493-3c03-a601-3734117996f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl

            X509v3 Authority Key Identifier:
                keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.253.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4c:91:46:02:49:02:4f:43:f8:8c:ba:27:5e:b6:8e:82:9e:
         99:6f:e9:82:2a:90:3b:4b:a3:09:94:a8:f2:46:d9:52:5c:0d:
         4d:37:9d:2d:88:35:37:81:54:76:18:e9:c4:fd:b8:95:89:84:
         80:ef:0e:95:23:a4:94:24:5f:66:ec:43:4a:dd:2b:de:13:87:
         37:ba:53:d1:a7:f6:2e:de:35:e6:2e:ff:13:b0:74:dd:e7:11:
         d9:ae:06:b4:8b:c7:db:6a:19:46:b4:79:a9:f9:87:1f:a8:4c:
         38:17:f7:e8:14:61:c6:7a:8f:ec:64:cb:03:a0:82:ff:74:08:
         52:3d:de:c6:f9:45:c7:28:e5:db:07:ab:c9:01:14:3c:17:2e:
         7d:72:dc:18:75:a0:fd:90:16:cf:b3:26:36:1e:b0:c2:a8:7d:
         1d:94:2b:e9:0c:19:28:0f:3b:57:03:f8:97:f2:4f:7c:55:20:
         6d:25:5d:20:bc:45:5d:1c:a7:81:9b:8b:ae:19:c1:23:12:4f:
         40:61:15:e7:41:0c:d6:7d:50:ef:da:c9:04:b9:82:35:e6:e5:
         88:aa:28:2e:d6:bf:d2:5b:1f:96:6f:e1:e6:24:7b:d5:8a:8b:
         fc:3c:2b:28:3d:bb:77:81:76:e0:ce:ef:f4:74:c1:3f:4d:9e:
         28:7c:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:09:16 2026 by rpki-client